| CVE-2026-45187 |
Improper Authorization vulnerability in Apache OFBiz Webtools
|
Not rated
|
May 19, 2026 |
| CVE-2026-41919 |
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-35086 |
Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services
|
Not rated
|
May 19, 2026 |
| CVE-2026-31986 |
Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-31910 |
Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-31909 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-31906 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-31388 |
Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments
|
Not rated
|
May 19, 2026 |
| CVE-2026-31387 |
Improper Authentication vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-31380 |
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')…
|
Not rated
|
May 19, 2026 |
| CVE-2026-31379 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a…
|
Not rated
|
May 19, 2026 |
| CVE-2026-31378 |
Improper Input Validation vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-29226 |
Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations
|
Not rated
|
May 19, 2026 |
| CVE-2026-29207 |
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2026-29220 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz
|
Not rated
|
May 19, 2026 |
| CVE-2025-61623 |
Reflected cross-site scripting vulnerability in Apache OFBiz
|
Not rated
|
Nov 12, 2025 |
| CVE-2025-59118 |
Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz
|
Not rated
|
Nov 12, 2025 |
| CVE-2025-54466 |
Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache…
|
Not rated
|
Aug 15, 2025 |
| CVE-2025-30676 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache OFBiz
|
Not rated
|
Apr 1, 2025 |
| CVE-2025-26865 |
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz
|
Not rated
|
Mar 10, 2025 |
| CVE-2024-47208 |
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache…
|
Not rated
|
Nov 18, 2024 |
| CVE-2024-48962 |
Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper…
|
8.9
High
|
Nov 18, 2024 |
| CVE-2024-45195 |
Exploited
Apache OFBiz Forced Browsing Vulnerability
|
Not rated
|
Sep 4, 2024 |
| CVE-2024-45507 |
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache…
|
Not rated
|
Sep 4, 2024 |
| CVE-2024-38856 |
Exploited
Apache OFBiz Incorrect Authorization Vulnerability
|
Not rated
|
Aug 5, 2024 |